Shows how a working patch management is built up in an institution and how the process is controlled and optimised, together with the core aspects of change management that matter for information security. In Edition 2023 the Baustein carries 16 requirement numbers, 14 of them live: 4 Basis requirements (B, MUSS, to be fulfilled first and without exception), 7 Standard requirements (S, SOLLTE) and 3 requirements for elevated protection needs (H), with 2 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as OPS.1.1.3.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.